Disk Arbitrator is a Mac OS X forensic tool designed to help users ensure proper forensic procedures are followed during disk imaging. It is a user interface for the Disk Arbitration framework, which enables programs to manage block storage devices, including mounting file systems. When enabled, Disk Arbitrator will prevent the mounting of file systems in read-write mode, preserving the integrity of evidence. Disk Arbitrator is not a software write blocker.
Comments